Page MenuHomeFreeBSD
Feed Search

Dec 3 2025

kevans added inline comments to D53954: [RFC] kern: mac: add various jail MAC hooks.
Dec 3 2025, 1:19 AM

Dec 2 2025

kevans added inline comments to D53953: kern: mac: add a MAC label to struct prison.
Dec 2 2025, 3:33 PM
kevans added inline comments to D53814: bhyve: add UNIX domain socket support to rfb.
Dec 2 2025, 2:53 PM
kevans accepted D53814: bhyve: add UNIX domain socket support to rfb.
Dec 2 2025, 5:05 AM
kevans added a comment to D53814: bhyve: add UNIX domain socket support to rfb.

Added a unix: prefix for UNIX domain sockets

This enables the use of relative paths.
To avoid parsing the configuration value twice, I decided to pass a sa_family_t parameter to the rfb_init function. I hope that is an acceptable way to implement it.

Dec 2 2025, 5:05 AM

Dec 1 2025

kevans added inline comments to D53814: bhyve: add UNIX domain socket support to rfb.
Dec 1 2025, 2:50 PM

Nov 30 2025

kevans accepted D53991: 15.0/relnotes: Mention new ascii loader art option.
Nov 30 2025, 3:09 AM

Nov 27 2025

kevans requested review of D53960: libjail: extend struct handlers to included MAC labels.
Nov 27 2025, 6:38 PM
kevans requested review of D53959: libjail: start refactoring struct ioctl support.
Nov 27 2025, 6:38 PM
kevans requested review of D53958: kern: add a mac.label jail parameter.
Nov 27 2025, 6:38 PM
kevans requested review of D53957: kern: mac: pull mac_label_copyin_string out.
Nov 27 2025, 6:37 PM
kevans requested review of D53956: mac_set_fd(3): add support for jail descriptors.
Nov 27 2025, 6:37 PM
kevans requested review of D53955: jaildesc: add an accessor for the struct prison in a jaildesc.
Nov 27 2025, 6:37 PM
kevans requested review of D53954: [RFC] kern: mac: add various jail MAC hooks.
Nov 27 2025, 6:37 PM
kevans requested review of D53953: kern: mac: add a MAC label to struct prison.
Nov 27 2025, 6:37 PM

Nov 24 2025

kevans accepted D53814: bhyve: add UNIX domain socket support to rfb.

Implementation looks fine to me, but I defer to bhyve-y folks for final review... in particular, I do wonder if they might prefer some more explicit prefix like unix:/path/to/sock

Nov 24 2025, 11:28 PM

Nov 23 2025

kevans added inline comments to D53814: bhyve: add UNIX domain socket support to rfb.
Nov 23 2025, 1:28 AM

Nov 17 2025

kevans added a comment to D53781: iwx: tag RX frames as A_MPDU RX; tag A-MSDU frames appropriately.

Just dropping a note that this leads to ~10x throughput to pkg.f.o on my laptop -- previously averaging somewhere around ~2-3mbit/s due to constant out-of-order acks, up to ~25-30 mbit/s on average

Nov 17 2025, 11:20 PM ยท wireless

Nov 16 2025

kevans accepted D53772: setcred(): Remove an optimization for when cr_groups[0] was the egid.
Nov 16 2025, 2:26 AM

Nov 15 2025

kevans committed rGc490bc73eb68: tpm: fix the conditional for the arm64 build.
Nov 15 2025, 2:23 AM
kevans committed rGcca34aa1d005: tpm: crb: factor out idle/ready state transitions.
Nov 15 2025, 2:23 AM
kevans closed D53682: tpm: crb: factor out idle/ready state transitions.
Nov 15 2025, 2:23 AM
kevans committed rG1d678ba57569: lam: fix using stdin more than once.
Nov 15 2025, 12:28 AM

Nov 14 2025

kevans added inline comments to D50727: loader.8: Document module commands.
Nov 14 2025, 2:52 PM
kevans accepted D50727: loader.8: Document module commands.
Nov 14 2025, 2:51 PM
kevans closed D53750: lam: fix using stdin more than once.
Nov 14 2025, 2:37 PM
kevans committed rG6a9452c8378a: lam: fix using stdin more than once.
Nov 14 2025, 2:37 PM
kevans added inline comments to D53750: lam: fix using stdin more than once.
Nov 14 2025, 2:34 PM
kevans added a comment to D53750: lam: fix using stdin more than once.

I suggested via email:

diff
--- a/usr.bin/lam/lam.c
+++ b/usr.bin/lam/lam.c
@@ -213,11 +213,11 @@ gatherline(struct openfile *ip)
        *p = '\0';
        if (c == EOF) {
                ip->eof = 1;
+               if (ip->fp == stdin)
+                       fclose(stdin);
                if (ferror(ip->fp)) {
                        err(EX_IOERR, NULL);
                }
-               if (ip->fp == stdin)
-                       fclose(stdin);
                morefiles--;
                return (pad(ip));
        }

But this is fine as well. Plus, it has tests!

Nov 14 2025, 3:38 AM
kevans added a comment to D53683: tpm: crb: add support for the Pluton startmethod.

Hmm, the definition came in here:

Nov 14 2025, 3:32 AM
kevans updated the diff for D53682: tpm: crb: factor out idle/ready state transitions.

-1 -> 0

Nov 14 2025, 3:10 AM
kevans added inline comments to D53682: tpm: crb: factor out idle/ready state transitions.
Nov 14 2025, 3:10 AM
kevans requested review of D53750: lam: fix using stdin more than once.
Nov 14 2025, 1:53 AM

Nov 11 2025

kevans updated the test plan for D53683: tpm: crb: add support for the Pluton startmethod.
Nov 11 2025, 5:13 PM
kevans updated the diff for D53683: tpm: crb: add support for the Pluton startmethod.

Add missing size check to the startmethod _attach()

Nov 11 2025, 4:40 AM
kevans requested review of D53683: tpm: crb: add support for the Pluton startmethod.
Nov 11 2025, 1:55 AM
kevans requested review of D53682: tpm: crb: factor out idle/ready state transitions.
Nov 11 2025, 1:55 AM

Nov 7 2025

kevans committed rG51c5e2b60247: libsys: install manpage links for jail_attach_jd/jail_remove_jd (authored by csjp).
Nov 7 2025, 1:12 AM

Nov 6 2025

kevans accepted D53615: vt(4): allow up to _SIG_MAXSIG (128) for VT_SETMODE.

I know ray@ pops in sometimes so we might give him (and Ed) a little time to object, but I also didn't really see a reason to impose this particular limit. I did wonder if it was just an oversight because NSIG on other platforms *does* usually cover all valid signals (as far as I've observed)

Nov 6 2025, 2:30 PM
kevans accepted D53610: ncurses: Move termcap and tabset to ncurses-lib.
Nov 6 2025, 3:00 AM

Nov 5 2025

kevans committed rG737edb8fb52b: posix_fallocate(2): move unsupported case to EOPNOTSUPP.
Nov 5 2025, 12:32 AM
kevans committed rGb87436d8be8e: nfs_clvnops: standardize on EOPNOTSUPP for posix_fallocate(2).
Nov 5 2025, 12:31 AM
kevans committed rGfa393807c57e: fusefs: standardize on OPNOTSUPP for posix_fallocate(2).
Nov 5 2025, 12:31 AM
kevans closed D53537: posix_fallocate(2): move unsupported case to EOPNOTSUPP.
Nov 5 2025, 12:31 AM
kevans closed D53536: nfs_clvnops: standardize on EOPNOTSUPP for posix_fallocate(2).
Nov 5 2025, 12:31 AM
kevans closed D53535: fusefs: standardize on OPNOTSUPP for posix_fallocate(2).
Nov 5 2025, 12:31 AM
kevans committed rG96c1d8db39df: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 5 2025, 12:28 AM
kevans committed rG90314c04f10f: makedev(9): drop an additional note about cdevpriv dtors.
Nov 5 2025, 12:28 AM
kevans closed D53439: makedev(9): drop an additional note about cdevpriv dtors.
Nov 5 2025, 12:28 AM
kevans closed D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 5 2025, 12:28 AM

Nov 4 2025

kevans added inline comments to D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 4 2025, 10:20 PM
kevans added inline comments to D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 4 2025, 6:15 PM
kevans added inline comments to D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 4 2025, 6:11 PM
kevans updated the diff for D53537: posix_fallocate(2): move unsupported case to EOPNOTSUPP.

Describe the switch a little more in HISTORY and update the STANDARDS; the
notable changes since -2004 are this different error return and clarification
of EFBIG to surface if the file size limit is exceeded (with generation of a
SIGXFSZ).

Nov 4 2025, 3:32 PM
kevans updated the diff for D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.

Do a read-once load of si_drv1, just in case. Amend the comment to try and
describe our solution more completely

Nov 4 2025, 6:14 AM
kevans committed rG94360584542a: ipfw: pmod: avoid further rule processing after tcp-mod failures.
Nov 4 2025, 12:54 AM
kevans committed rGdeb684f9d1d6: ipfw: pmod: avoid further rule processing after tcp-mod failures.
Nov 4 2025, 12:54 AM
kevans committed rG21d55ae111aa: ipfw: pmod: avoid further rule processing after tcp-mod failures.
Nov 4 2025, 12:53 AM

Nov 3 2025

kevans accepted D53545: ifconfig: Fix invalid free() in ifbridge.
Nov 3 2025, 4:59 PM
kevans added inline comments to D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 3 2025, 1:56 AM

Nov 2 2025

kevans added inline comments to D53535: fusefs: standardize on OPNOTSUPP for posix_fallocate(2).
Nov 2 2025, 5:14 PM
kevans updated the diff for D53535: fusefs: standardize on OPNOTSUPP for posix_fallocate(2).

Correct it for the file-specific unsupported mode as well

Nov 2 2025, 4:47 PM
kevans updated the diff for D53535: fusefs: standardize on OPNOTSUPP for posix_fallocate(2).

Fix observed test failures; there's only a few places that we expect EINVAL.

Nov 2 2025, 3:49 PM
kevans requested review of D53537: posix_fallocate(2): move unsupported case to EOPNOTSUPP.
Nov 2 2025, 3:20 PM
kevans requested review of D53536: nfs_clvnops: standardize on EOPNOTSUPP for posix_fallocate(2).
Nov 2 2025, 3:20 PM
kevans requested review of D53535: fusefs: standardize on OPNOTSUPP for posix_fallocate(2).
Nov 2 2025, 3:20 PM
kevans updated the diff for D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.

Simplify a bit using the net epoch

Nov 2 2025, 3:02 PM

Nov 1 2025

kevans added inline comments to D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Nov 1 2025, 6:20 PM
kevans committed rGc0382512bfce: ipfw: pmod: avoid further rule processing after tcp-mod failures.
Nov 1 2025, 5:35 PM

Oct 31 2025

kevans added a comment to D52740: inetd.8: Remove the enumeration of examples.
In D52740#1221574, @0mp wrote:

(not a inetd-sme) I thought they were Nm because these utilities are part of inetd?

AFAIU, these utilities are just called by inetd and are not internal. I've not checked the code but my understanding is that inetd is able to run any service the user specifies in the config file.

Oct 31 2025, 5:40 PM

Oct 30 2025

kevans updated the diff for D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.

Dance around tunmtx to protect against concurrent tun_destroy() / tunopen()

Oct 30 2025, 1:59 AM

Oct 29 2025

kevans committed rGd617806aac14: libc: report _SC_NPROCESSORS_ONLN more accurately in cpu-limited jails.
Oct 29 2025, 4:33 PM
kevans closed D52295: libc: report _SC_NPROCESSORS_ONLN more accurately in cpu-limited jails.
Oct 29 2025, 4:33 PM
kevans requested review of D53439: makedev(9): drop an additional note about cdevpriv dtors.
Oct 29 2025, 3:19 PM
kevans requested review of D53438: if_tuntap: defer transient destroy_dev() to a taskqueue.
Oct 29 2025, 3:19 PM
kevans committed rG98edcbcce0a4: libutil: defer setting the MAC label until after the login class.
Oct 29 2025, 2:38 AM
kevans closed D53362: libutil: defer setting the MAC label until after the login class.
Oct 29 2025, 2:37 AM
kevans added inline comments to D53256: nvme: Fix PRP list size calculation.
Oct 29 2025, 2:34 AM

Oct 27 2025

kevans abandoned D52703: netgraph: ng_device: set curvnet when writing from the cdev.

Already landed in a505b80b2f038409300cd05e2ea95822942404e2, and it's clear nobody is using it in a way that this is urgent to MFC independently

Oct 27 2025, 2:35 PM

Oct 26 2025

kevans committed rG081218b7a200: libc: fix description issues in mac_text(3)/mac_free(3).
Oct 26 2025, 3:14 PM
kevans requested review of D53362: libutil: defer setting the MAC label until after the login class.
Oct 26 2025, 3:01 PM
kevans added a comment to D53350: nlsysevent: don't assume that we can sleep in sysevent_send().

Can you please point me to how reproduce the problem? IMHO, we should just provide a KPI to register new sysevent_groups and pre-register them before the events.

Oct 26 2025, 2:20 PM
kevans added inline comments to D47498: mac_bsdextended: remove obsolete sysctl from man page.
Oct 26 2025, 2:13 PM

Oct 25 2025

kevans requested review of D53350: nlsysevent: don't assume that we can sleep in sysevent_send().
Oct 25 2025, 4:12 AM

Oct 24 2025

kevans accepted D53303: devfs: make destroy_dev() a release barrier for cdevpriv destructors runs.

Thanks!

Oct 24 2025, 1:07 PM

Oct 23 2025

kevans accepted D53310: ports-mgmt/pkg: Backport bug fix needed for 15.0.

Presumably tested, LGTM

Oct 23 2025, 11:24 PM

Oct 21 2025

kevans added inline comments to D53239: nuageinit: Add guards against empty user data.
Oct 21 2025, 2:20 PM
kevans accepted D53238: nuageinit: Silence luacheck warnings and fix typos.

Seems reasonable to me (from a flua perspective; I defer to bapt for nuageinit in general, of course)

Oct 21 2025, 2:16 PM
kevans added inline comments to D53239: nuageinit: Add guards against empty user data.
Oct 21 2025, 1:57 PM

Oct 20 2025

kevans accepted D53226: cut: Avoid undefined behavior..
Oct 20 2025, 7:09 PM

Oct 19 2025

kevans added a comment to D53180: geom: fix glabel status after 0d4642a.

Please be sure to include 0d4642a as Fixes metadata so that it's clear they need to go together both for MFCs and downstreams that might be consuming main.

Oct 19 2025, 4:18 PM

Oct 17 2025

kevans added inline comments to D53179: packages: Remove the /boot hack from mtree-to-plist.awk.
Oct 17 2025, 10:55 PM
kevans added inline comments to D53179: packages: Remove the /boot hack from mtree-to-plist.awk.
Oct 17 2025, 10:35 PM
kevans accepted D53161: flua: Move to a new flua package.

Ahh, whoops- my bad!

Oct 17 2025, 7:58 PM
kevans added a comment to D53161: flua: Move to a new flua package.

We'll also need PACKAGE in libexec/flua/libfreebsd/Makefile.inc, but I think this covers everything else in main.

Oct 17 2025, 1:31 PM
kevans accepted D53163: ncurses: Move utilities to the ncurses package.

Whoops, good catch

Oct 17 2025, 1:28 PM
kevans added a comment to D52824: release: Restore licenses for kyua and ncurses.
In D52824#1213747, @des wrote:

@kevans did you get around to fixing the lua bootstrap issue?

Oct 17 2025, 4:37 AM

Oct 13 2025

kevans accepted D53075: Ping: Make build reproducible.
Oct 13 2025, 7:03 PM
kevans accepted D53060: ncurses: Add an ncurses-lib package.
Oct 13 2025, 1:43 PM

Oct 12 2025

kevans updated the diff for D51207: truncate: fix a minor nit + add a hole-punching test.

Address review feedback; use stat -h and stop asserting on hole reporting

Oct 12 2025, 2:08 AM